CertNexus Exam ITS-110 Topic 5 Question 44 Discussion

Actual exam question for CertNexus's ITS-110 exam

Question #: 44
Topic #: 5

A hacker enters credentials into a web login page and observes the server's responses. Which of the following attacks is the hacker attempting?

AAccount enumeration

BDirectory traversal

CBuffer overflow

DSpear phishing

Show Suggested Answer

Suggested Answer: A

by Brunilda at Sep 17, 2024, 07:51 AM

Limited Time Offer

25%

Off

Get Premium ITS-110 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Barney

8 months ago

I bet the hacker's password is 'password123'. That's the first thing I'd try.

upvoted 0 times

...

Dulce

8 months ago

Spear phishing? Really? This is clearly an attempt at account enumeration. The hacker is just fishing for valid usernames.

upvoted 0 times

Hayley

7 months ago

I agree, the hacker is trying to find valid usernames.

upvoted 0 times

...

Nicolette

7 months ago

Actually, I believe it's account enumeration.

upvoted 0 times

...

Sylvie

7 months ago

No, it's definitely spear phishing.

upvoted 0 times

...

Isidra

8 months ago

I think it's account enumeration.

upvoted 0 times

...

Mitsue

8 months ago

Nah, it's gotta be a buffer overflow. The hacker is probably trying to exploit a vulnerability in the login page's code.

upvoted 0 times

Julio

7 months ago

C: I agree with the user comment, it's most likely a buffer overflow attack to exploit a coding vulnerability.

upvoted 0 times

...

Quentin

7 months ago

B: No way, it's definitely directory traversal. They're trying to access files they shouldn't be able to.

upvoted 0 times

...

Jules

8 months ago

A: I think it's actually account enumeration. The hacker is trying to see if the credentials are valid.

upvoted 0 times

...

Janna

9 months ago

But wouldn't observing server responses be more related to account enumeration?

upvoted 0 times

...

Rozella

9 months ago

I disagree, I believe it's directory traversal.

upvoted 0 times

...

Jose

9 months ago

I think it's a directory traversal attack. The hacker is probably trying to access restricted directories on the server.

upvoted 0 times

...

Desire

9 months ago

Definitely account enumeration. The hacker is trying to guess valid usernames by observing the server's responses.

upvoted 0 times

Winfred

8 months ago

C: That makes sense, they're observing the server's responses.

upvoted 0 times

...

Demetra

8 months ago

B: Yeah, the hacker is trying to guess valid usernames.

upvoted 0 times

...

Josphine

8 months ago

A: I think it's account enumeration.

upvoted 0 times

...

Janna

9 months ago

I think the hacker is attempting account enumeration.

upvoted 0 times

...